Embedded Files
These are the core things you must do to stay on the right side of the law. You can help your company comply with these principles by developing good working practices. That means being vigilant, understanding the policies and following the processes.
Fair, Transparent and Lawful
Fair, Transparent and Lawful
You need a lawful basis to hold personal data and must notify people you're holding it within one calendar month. The most common legal basis you'll use is legitimate interest.
Purpose
Purpose
You can only use data for the specific purpose that it was given to you.
Adequate, Relevant and Limited
Adequate, Relevant and Limited
You should only record data that is relevant and necessary to carry out the service you provide.
Accurate
Accurate
You have a duty to keep any data you hold accurate and up to date.
Time Limited
Time Limited
Data should only be kept as long as necessary.
Secure
Secure
Data needs to be kept securely, whether it is held electronically or physically.
View Answer
View Answer
All of the principles are equally important.
As far as the regulator is concerned, each principle has equal importance and applies to all businesses, regardless of size. They also expect your company to be able to show what you are doing to abide by each principle.
Informing people that you are holding their data and how to exercise their rights is very important but your other obligations under the GDPR still need to be fulfilled.
Even if you have consent to hold data it will be for a specific purpose and for a specific time period. Consent is widely misunderstood as you do not need to have consent to hold data. Even if you do have consent you still need to comply with all of the requirements of the GDPR.
It's a common misconception that you can only hold data if you have a person's consent. This is not true as all the legal basis are equally valid.
So you need to get them all right - all of the time.
That's a lot of plates to keep spinning, which is why your business needs help. You need to understand the relevant policies and processes and take responsibility for your actions. This training is just the beginning.
Page updated
Google Sites
Report abuse